Privacy Policy

1. Introduction

This Privacy Policy explains how Sprike LLC ("Sprike," "we," "us," or "our"), operating the Sellwise platform ("Service"), collects, uses, shares, and protects your personal information. Sprike LLC is a Delaware limited liability company located at 8 The Green, STE R, Dover, DE 19901, United States.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

For the purposes of the EU General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, Sprike LLC is the data controller responsible for your personal data.

2. Information We Collect

2.1 Information you provide directly

• Account information: When you create an account, we collect your email address, first name, last name, and profile picture. If you sign up using Google OAuth, we receive your name, email address, and profile picture from Google.
• Design images: Images you upload to the Service for AI-powered design analysis.
• Niche keywords: Market niche keywords you provide to guide the competitive analysis of your designs.
• Communication data: Information you provide when you contact our support team.

2.2 Information collected automatically

• Usage data: Information about how you use the Service, including analysis history, credit transactions, and feature interactions.
• Device and log data: IP address, browser type, operating system, device identifiers, and access timestamps collected automatically when you use the Service.

2.3 Information from third parties

• Authentication provider (Clerk): We use Clerk for authentication. Clerk processes your login credentials and session data. See Clerk's Privacy Policy for details.
• Payment processor (Stripe): We use Stripe to process payments. When you subscribe, Stripe collects your payment card details, billing address, and transaction information. We receive your Stripe customer ID and subscription status but never access or store your full payment card number. See Stripe's Privacy Policy for details.
• Marketplace data (Etsy): When analyzing your designs, we fetch publicly available competitor listing data from the Etsy API, including product titles, images, prices, favorites, and review counts. This data is used solely to provide competitive context for your design analysis.

3. How We Use Your Information

We use your information for the following purposes:

• Providing the Service: Processing your design images through AI models, generating analysis results and scores, fetching competitor data, managing your account, and delivering features.
• Payment processing: Managing subscriptions, processing payments, tracking credit balances, and issuing invoices.
• Communication: Sending transactional emails (account verification, payment confirmations, subscription updates), and — with your explicit consent — marketing communications.
• Improvement: Analyzing usage patterns to improve the Service, fix bugs, and develop new features.
• Security and compliance: Detecting and preventing fraud, abuse, and unauthorized access; complying with legal obligations.

4. AI Processing and Your Design Images

When you use the Service to analyze a design, your uploaded design image and niche keyword are sent to third-party AI model providers, including Anthropic and OpenAI, for processing. These providers analyze your design and generate scores, feedback, and recommendations.

• No AI training: We do not use your design images, niche keywords, or analysis results to train AI models. Your inputs are processed solely to deliver the requested analysis.
• No marketing use: Your design images are never used for marketing, promotional, or any purpose other than providing the Service to you.
• Third-party processing: Your design images may be processed by Anthropic and OpenAI in accordance with their respective privacy policies and terms. See Anthropic's Privacy Policy and OpenAI's Privacy Policy for details.
• Storage: Your design images and analysis results are stored permanently on our servers while your account is active, so you can access and review past analyses at any time.

5. How We Share Your Information

We do not sell your personal data. We share your information only in the following circumstances:

• Service providers: We share data with trusted third-party service providers who assist in operating the Service, including:
  • Clerk — authentication and user management
  • Stripe — payment processing and subscription management
  • Convex — database and backend infrastructure
  • Anthropic — AI model inference for design analysis
  • OpenAI — AI model inference for design analysis
  • Etsy — marketplace data for competitive analysis
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.
• With your consent: We may share your information for purposes not described here with your explicit consent.

6. Cookies and Tracking Technologies

Sellwise uses minimal cookies necessary for the Service to function. We do not currently use third-party analytics, advertising cookies, or behavioral tracking technologies.

• Essential cookies: Session cookies managed by our authentication provider (Clerk) to keep you logged in and maintain your session. These are strictly necessary and cannot be disabled.
• Fraud prevention: Stripe may use cookies and device fingerprinting technologies for fraud detection during payment processing.

If we introduce analytics or marketing cookies in the future, we will update this Privacy Policy and implement appropriate consent mechanisms before doing so.

7. Data Retention

• Account data: We retain your account information for as long as your account is active. If you delete your account or request deletion, all personal data, design images, and analysis results will be permanently deleted within 30 days.
• Design images and analysis results: Your design images and their associated analysis results are stored permanently while your account is active.
• Financial records: Credit transaction logs and payment records may be retained for up to 7 years after account closure as required by applicable tax and financial regulations.
• Legal obligations: We may retain certain information beyond the periods stated above if required by law or necessary to establish, exercise, or defend legal claims.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using TLS/HTTPS.
• Secure HTTP-only session cookies that are not accessible to client-side scripts.
• Security headers including HSTS, X-Frame-Options, and Content-Type-Options.
• Payment card data handled exclusively by Stripe (PCI DSS Level 1 certified).
• Restricted access to personal data on a need-to-know basis.

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from the laws of your country of residence.

For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on:

• The EU-U.S. Data Privacy Framework and its UK Extension.
• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data processing agreements with our service providers that include appropriate safeguards.

10. Your Rights Under GDPR (EEA and UK)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR and UK Data Protection Act 2018:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request that we limit the processing of your personal data.
• Right to data portability: Request your personal data in a structured, machine-readable format.
• Right to object: Object to the processing of your personal data for certain purposes, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at support@sellwise.so. We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

Legal basis for processing

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Service to you (account management, design analysis, subscription management).
• Legitimate interests: Processing necessary for our legitimate interests, such as improving the Service, ensuring security, and preventing fraud.
• Consent: Processing based on your explicit consent, such as marketing communications.
• Legal obligations: Processing required to comply with applicable laws and regulations.

11. Your Rights Under CCPA/CPRA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes of collection, and the categories of third parties with whom we share it.
• Right to delete: Request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise your rights, contact us at support@sellwise.so. We will verify your identity and respond within 45 days.

Categories of personal information collected

12. Marketing Communications

We may send you marketing emails about new features, promotions, and product updates only if you have given us your explicit consent to do so (opt-in). You can withdraw your consent and unsubscribe at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Contacting us at support@sellwise.so.

Opting out of marketing emails will not affect transactional communications such as payment confirmations, account notifications, and security alerts.

13. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal data, please contact us at support@sellwise.so.

14. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us, including Etsy listing pages. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on the Service with an updated "Last updated" date. For significant changes, we will provide notice via email or an in-app notification at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.

16. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:

For GDPR-related inquiries, you may also contact your local data protection supervisory authority.